package com.yuan.yblog.portal.aop;

import com.alibaba.fastjson2.JSON;
import com.yuan.yblog.crud.entity.OperationLog;
import com.yuan.yblog.portal.aop.annotation.Log;
import com.yuan.yblog.portal.service.AuthenticationService;
import com.yuan.yblog.security.pojo.LoginUser;
import com.yuan.yblog.portal.enums.BusinessStatus;
import com.yuan.yblog.portal.filter.PropertyPreExcludeFilter;
import com.yuan.yblog.portal.asyn.AsyncManager;
import com.yuan.yblog.common.utils.IpUtils;
import com.yuan.yblog.common.utils.ServletUtils;
import com.yuan.yblog.common.utils.StringUtils;
import com.yuan.yblog.portal.asyn.AsyncFactory;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.ArrayUtils;
import org.aspectj.lang.JoinPoint;
import org.aspectj.lang.annotation.*;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.core.NamedThreadLocal;
import org.springframework.http.HttpMethod;
import org.springframework.stereotype.Component;
import org.springframework.validation.BindingResult;
import org.springframework.web.multipart.MultipartFile;

import java.util.Collection;
import java.util.Date;
import java.util.Map;


@Component
@Aspect
@Slf4j
public class OperationLogAspect {
    /**
     * 排除敏感属性字段，例如防止密码等信息被记入日志
     */
    public static final String[] EXCLUDE_PROPERTIES = {"password","oldPassword","newPassword","token","ciphertext","authentication"};

    /**
     * 计算操作消耗时间
     */
    private static final ThreadLocal<Long> TIME_THREADLOCAL = new NamedThreadLocal<Long>("Cost Time");

    @Autowired
    AuthenticationService authenticationService;

    /**
     * 处理请求前执行
     */
    @Before(value = "@annotation(controllerLog)")
    public void boBefore(JoinPoint joinPoint, Log controllerLog)
    {
        //记录开始时间
        TIME_THREADLOCAL.set(System.currentTimeMillis());
    }

    /**
     * 处理完请求后执行
     * @param joinPoint 切点
     */
    @AfterReturning(value = "@annotation(controllerLog)",returning = "jsonResult")
    protected void doAfterReturning(JoinPoint joinPoint, Log controllerLog, Object jsonResult){
        handleLog(joinPoint, controllerLog, null, jsonResult);
    }


    /**
     * 拦截异常操作
     * @param joinPoint 切点
     * @param e 异常
     */
    @AfterThrowing(value = "@annotation(controllerLog)",throwing = "e")
    protected void doAfterThrowing(JoinPoint joinPoint, Log controllerLog, Exception e){
        handleLog(joinPoint, controllerLog, e, null);
    }


    /**
     * 记录日志
     * @param joinPoint 切入点
     * @param controllerLog 注解类
     * @param e 异常对象
     * @param jsonResult 执行结果
     */
    protected void handleLog(final JoinPoint joinPoint, Log controllerLog, final Exception e, Object jsonResult) {
        try{
            // 获取当前的用户
            LoginUser loginUser = authenticationService.getLoginUserDetails();
            // *========数据库日志=========*//
            OperationLog operationLog = new OperationLog();
            //操作状态与时间
            operationLog.setStatus(BusinessStatus.SUCCESS.ordinal());
            operationLog.setOperTime(new Date());
            // 源ip
            String ip = IpUtils.getIpAddr();
            operationLog.setOperIp(ip);
            //请求路径
            operationLog.setOperUrl(StringUtils.substring(ServletUtils.getRequest().getRequestURI(), 0, 255));
            //请求人
            if (loginUser != null)
            {
                operationLog.setOperName(loginUser.getUsername());
            }
            if (e != null)
            {
                operationLog.setStatus(BusinessStatus.FAIL.ordinal());
                operationLog.setErrorMsg(StringUtils.substring(e.getMessage(), 0, 2000));
            }
            // 设置方法名称
            String className = joinPoint.getTarget().getClass().getName();
            String methodName = joinPoint.getSignature().getName();
            operationLog.setMethod(className + "." + methodName + "()");
            // 设置请求方式
            operationLog.setRequestMethod(ServletUtils.getRequest().getMethod());
            // 处理设置注解上的参数
            getControllerMethodDescription(joinPoint, controllerLog, operationLog, jsonResult);
            // 设置消耗时间
            operationLog.setCostTime(System.currentTimeMillis() - TIME_THREADLOCAL.get());
            // 开启异步任务，保存到数据库
            AsyncManager.me().execute(AsyncFactory.recordOperationLog(operationLog));

        }catch (Exception exp){
            // 记录本地异常日志
            log.error("异常信息:{}", exp.getMessage());
            exp.printStackTrace();
        }
        finally {
            TIME_THREADLOCAL.remove();//结束计时线程
        }
    }

    /**
     * 获取注解中对方法的描述信息 用于Controller层注解
     *
     * @param log 日志
     * @param operLog 操作日志
     * @throws Exception
     */
    public void getControllerMethodDescription(JoinPoint joinPoint, Log log, OperationLog operLog, Object jsonResult) throws Exception {
        // 设置action动作
        operLog.setBusinessType(log.businessType().ordinal());
        // 设置标题
        operLog.setTitle(log.title());
        // 是否需要保存request，参数和值
        if (log.isSaveRequestData()) {
            // 获取参数的信息，传入到数据库中。
            setRequestValue(joinPoint, operLog, log.excludeParamNames());
        }
        // 是否需要保存response，参数和值
        if (log.isSaveResponseData() && StringUtils.isNotNull(jsonResult))
        {
            operLog.setJsonResult(StringUtils.substring(JSON.toJSONString(jsonResult), 0, 2000));
        }
    }
    /**
     * 获取请求的参数，放到log中
     *
     * @param operLog 操作日志
     * @throws Exception 异常
     */
    private void setRequestValue(JoinPoint joinPoint, OperationLog operLog, String[] excludeParamNames) throws Exception {
        //获取请求的Param参数
        Map<?, ?> paramsMap = ServletUtils.getParamMap(ServletUtils.getRequest());
        String requestMethod = operLog.getRequestMethod();
        if (StringUtils.isEmpty(paramsMap)
                && (HttpMethod.PUT.name().equals(requestMethod) || HttpMethod.POST.name().equals(requestMethod))) {
            /* Param参数不存在或请求方法为PUT/POST，说明带有RequestBody位于控制器方法参数，
            *  将所有RequestBody转为JSON，排除敏感字段，在转为String
            * */
            String params = argsArrayToString(joinPoint.getArgs(), excludeParamNames);
            operLog.setOperParam(StringUtils.substring(params, 0, 2000));
        }
        else {
            /**
             * 不存在RequestBody，将请求字段转为JSON，排除字段，再转为String
             */
            operLog.setOperParam(StringUtils.substring(JSON.toJSONString(paramsMap, excludePropertyPreFilter(excludeParamNames)), 0, 2000));
        }
    }

    /**
     * 参数拼装
     * @param paramsArray 字段数组
     * @param excludeParamNames 需要排除的字段名
     * @return 拼接参数后的字符串
     */
    private String argsArrayToString(Object[] paramsArray, String[] excludeParamNames) {
        String params = "";
        if (paramsArray != null && paramsArray.length > 0)
        {
            for (Object o : paramsArray)
            {
                if (StringUtils.isNotNull(o) && !isFilterObject(o))
                {
                    try
                    {
                        String jsonObj = JSON.toJSONString(o, excludePropertyPreFilter(excludeParamNames));
                        params += jsonObj.toString() + " ";
                    }
                    catch (Exception e)
                    {
                    }
                }
            }
        }
        return params.trim();
    }


    /**
     * 忽略敏感属性
     * @param excludeParamNames 需要排除的字段名
     * @return PropertyPreExcludeFilter
     */
    public PropertyPreExcludeFilter excludePropertyPreFilter(String[] excludeParamNames) {
        //指定排除的字段：本类规定的字段EXCLUDE_PROPERTIES、额外设置排除的字段excludeParamNames
        return new PropertyPreExcludeFilter().addExcludes(ArrayUtils.addAll(EXCLUDE_PROPERTIES, excludeParamNames));
    }

    /**
     * 判断是否需要过滤的对象。采用了反射的方法。
     * 过滤的对象：文件、request请求、response响应、BindingResult等
     * 这些信息都是不用记录到日志里面的
     *
     * @param o 对象信息。
     * @return 如果是需要过滤的对象，则返回true；否则返回false。
     */
    @SuppressWarnings("rawtypes")
    public boolean isFilterObject(final Object o) {
        Class<?> clazz = o.getClass();
        if (clazz.isArray())
        {
            //对象o是数组
            return clazz.getComponentType().isAssignableFrom(MultipartFile.class);
        }
        else if (Collection.class.isAssignableFrom(clazz)) {
            //对象o是集合
            Collection collection = (Collection) o;
            for (Object value : collection)
            {
                return value instanceof MultipartFile;
            }
        } else if (Map.class.isAssignableFrom(clazz)) {
            //对象o是Map
            Map map = (Map) o;
            for (Object value : map.entrySet()) {
                Map.Entry entry = (Map.Entry) value;
                return entry.getValue() instanceof MultipartFile;
            }
        }
        return o instanceof MultipartFile || o instanceof HttpServletRequest || o instanceof HttpServletResponse
                || o instanceof BindingResult;
    }
}
